EUVD-2026-64830

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: The fs and lock operations during checks for active status. The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from the hardware, set the hardware deletion function to NULL...

WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin 12 Step Meeting List versions = 3.19.16...

CVE-2026-53614

A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...

ANT-2026-0JJXMV3G · supabase/auth · privilege-escalation

privilege-escalation medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0JJXMV3G: Passkey registration requires no step-up authentication The POST...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer-fips, gogatekeeper, step-fips, sftpgo, telegraf, gitness, step-ca, step-ca-fips, tkn-fips, buf, kyverno-policy-reporter-ui, cloudflared, kyverno-policy-reporter-ui-fips, tkn, karma, step-issuer, dapr, rclone, rclone-fips, dapr-fips, step, cadd...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer, caddy-fips, step-ca-fips, step-issuer-fips, step-fips, step, caddy...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer, caddy-fips, step-ca-fips, step-issuer-fips, step-fips, step, caddy...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy-fips, frankenphp-8.5, frankenphp-8.3, step-ca-fips, step-issuer-fips, frankenphp-8.2, caddy, frankenphp-8.4...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator-fips, cert-manager-google-cas-issuer-fips, step-issuer-fips, gitlab-operator-fips, cert-manager-openshift-routes-fips, percona-xtradb-cluster-operator-fips, opentelemetry-operator, mariadb-operator-fips, cert-manager-cmctl,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, cert-exporter-fips, cert-exporter, cert-manager-cmctl-fips, step-issuer-fips, cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips, aws-privateca-issuer...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian, step-ca, caddy-fips, argo-workflows, trillian-fips, argo-workflows-fips, wavefront-collector-for-kubernetes, kots, step, caddy...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, kubeflow-fips, opa-envoy, grafana-mimir, caddy-fips, dgraph, cert-exporter, flux-image-reflector-controller-fips, smarter-device-manager, step-issuer-fips, opa-fips-envoy, sriov-network-device-plugin-fips, step-fips, amass,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, kubernetes-csi-external-provisioner, certificate-transparency, k3s, kube-rbac-proxy, melange, restic, spire-server, vcluster, fulcio, dagger, spicedb, sigstore-scaffolding, k8sgpt-operator, rqlite, gomplate, kubernetes-csi-driver-hostpath, k8sgpt,...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-issuer, step-ca, step, caddy...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-issuer, step-ca, step, caddy...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gogatekeeper, step-ca, karma, kyverno-policy-reporter-ui, buf, step-issuer, rclone, tkn, sftpgo, cloudflared, step, gitness, caddy...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-exporter, cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, percona-server-mongodb-operator, cert-manager-webhook-pdns, step-issuer, mariadb-operator, cert-manager-csi-driver, opentelemetry-operator, cert-manager-istio-csr...